CVE-2002-0639

creationtimestamp| type| source ---|---|--- 2019-07-21 18:35:29+00:00| seen| https://t.me/VulnerabilityNews/8168 2024-02-08 21:16:24+00:00| seen| https://t.me/ctinow/181632 2025-08-05 23:05:44+00:00| seen| https://bsky.app/profile/vegashackware.com/post/3lvot3rhwys2w...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...

CVE-2002-0639

CVE-2002-0639 concerns an integer overflow in sshd of OpenSSH 2.9.9–3.3 that enables remote code execution during ChallengeResponseAuthentication when SKEY or BSD_AUTH are used. The connected data confirms the CVE exists and notes a related entry, CVE-2002-0390, was reserved as a duplicate of CVE...